Author(s)
JDKMon is a little tool written in JavaFX that tries to detect all OpenJDK distributions installed on your machine and keep track of updates for those distributions.
It will scan for new updates every three hours and will inform you about available updates.
JDKMon won't install the distributions on your machine but will enable you to download them to a place of your choice.
At the moment the following distributions are supported:
- AdoptOpenJDK
- AdoptOpenJDK J9
- Bi Sheng
- Corretto
- Debian (pkgs not downloadable)
- Dragonwell
- Graalvm CE8
- Graalvm CE11
- Graalvm CE16
- Graalvm CE17
- JetBrains
- Kona
- Liberica
- Liberica Native
- Mandrel
- Microsoft
- OJDK Build
- Open Logic
- Oracle (not all pkgs downloadable)
- Oracle OpenJDK
- RedHat (pkgs not downloadable)
- SAP Machine
- Semeru
- Semeru Certified
- Temurin
- Trava
- Zulu
- Zulu Prime
JDKMon 17.0.18 has just been released!
This versions brings two new features, described below.
Vulnerability Info
JDKMon will check for all version numbers of the OpenJDK distributions it finds if there are known vulnerabilities. Meaning to say if you have a distribution with 16.0.1 installed on your machine. JDKMon will check if there are known vulnerabilities for OpenJDK 16.0.1.
There is NO guarantee that the distribution you use is affected but at least you will be aware that there might be a CVE (Common Vulnerability and Exposure).
The yellow circle in the screenshot below indicates that there are known vulnerabilities for OpenJDK 16.0.1.
When you click on the yellow circle another window will pop up which shows you the related CVE's.
The CVE entries in that window are links that when clicked will open the clicked CVE in your standard browser with a more detailed description.
TCK Test Info (Experimental)
If an OpenJDK distribution is TCK tested and provides information about that (e.g. like a certificate etc.), JDKMon will indicate this when you want to downlad an OpenJDK distribution.
You will find a little blue TCK tag besides the download button. If you click on that tag it will lead you to the link that is provided by the vendor of the distribution.
At the moment this info is only available from Azul but others will follow.
JDKMon is available for the following platforms:
- Windows x64
- Linux x64/arm64
- MacOS x64/aarch64
Download:
You can download the latest version from github relases or from JFX Central.
More info:
JDKMon Home
-
Java: Where the Wild Code Isn’t
In the last several years, the OpenJDK community has made Java significantly safer for users and developers while at the same time making it easier to design, build, and run applications quickly.
Java users should incorporate several practices to take full benefit from the defenses of the modern JRE.
Read More
-
Are Java Security Updates Important?
Recently, I was in discussion with a Java user at a bank about the possibilities of using Azul Platform Core to run a range of applications.
Security is a very serious concern when sensitive data is in use, and potentially huge sums of money could be stolen.
I was, therefore, somewhat taken aback when the user said, “We’re not worried about installing Java updates as our core banking services are behind a firewall.”
Read More -
Fix Java Security Issues While Coding in IntelliJ IDEA
Nowadays, developers are responsible for more than just creating the application. Besides working on features, developers have to focus on their applications’ maintainability, scalability, reliability, and security. Many developers are unsure of where to start with security. In addition, most companies still work with a dedicated security team instead of having security expertise inside the team.
A lot of developers practically live in their integrated development environment (IDE). A good IDE is like a swiss army knife: it is your go-to tool to do almost everything. Having everything I need to build, run, test, debug, and secure my application, makes a good IDE invaluable for many developers.
Read More
